Eviction Strategies Tool - Playbook-NG

The next generation of cyber incident response (IR) playbooks, Playbook-NG, is a stateless web-based application used to match incident findings with countermeasures for adversary containment and eviction. The interface ingests MITRE ATT&CK™ TTP IDs or free text describes threat actor activities on compromised assets and provides a corresponding list of recommended response actions. Users then can export the results in numerous formats such as JSON, Microsoft Word and Excel, and markdown. The application does not save information about the users or their inputs; work is cleared when the user browses off or clears the playbook. When users export a JSON file playbook, they can later upload it back into the application to view, modify and update. This allows Playbook-NG to update any countermeasures that have changed since their last visit while allowing defenders the ability to update plans with new findings in minutes. Playbook-NG also allows users to start with an incident template that is created and curated by CISA. These templates describe specific collections of TTPs in a campaign or event that may be used as is or customized quickly. Templates can be referenced in CISA publications, replacing the ad hoc remediation text per publication with an agile set of guidance that follows a “write once, share many” model of defensive strategies. In addition to providing a plan in a live crisis, Playbook-NG is ideal for generating realistic plans for tabletop scenarios. It is trivial to use Playbook-NG’s text extract functionality to paste in a report with TTP IDs and generate a playbook to use in an exercise discussion. Eviction Strategies Tool - Playbook-NG is the open-source project cisagov/playbook-ng (https://github.com/cisagov/playbook-ng) by cisagov, released under MIT. Ion packages it unmodified from commit 2183b1389f5b, adding only a manifest, an icon and a storage compatibility script.

Written by cisagov, published to Oikou by Ben Grande.

• ★ 164 stars on GitHub
• Licence: MIT
• Built from commit 2183b1389f5b

View the repository on GitHub

Not rated. Nobody has said who this app is suitable for, so Personal Clouds and the Oikou app treat it as 18+.

Internet

It asks to reach nothing on the internet.

Personal Cloud tools

• Keep a database of its own on your Personal Cloud ion.db

Notifications

It does not send push notifications.

Storage

Up to 16 MB on your Personal Cloud.

Sign in to add this web app to a Personal Cloud of yours. It runs there, on your own computer, and you open it from there; nothing is installed on your phone.

Sign in to add